Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/4ad5abf6-6e01-3b5c-86a8-77c4b389fc78.roa
File:                     4ad5abf6-6e01-3b5c-86a8-77c4b389fc78.roa (raw, json)
Hash identifier:          nYm03F4I7CgyVWj6Ug9cGe5h9ECH1AQcUTNG1rm7A/I=
Subject key identifier:   D8:C4:22:A2:C9:C3:C4:98:2C:28:DE:50:EC:BA:9B:EB:9D:5D:26:EA
Certificate issuer:       /CN=2627756a-b322-49e6-941e-ed30e9ab9eae
Certificate serial:       010D0C9F4328584B821CC4A459D9A86616789980
Authority key identifier: 84:40:C9:06:5E:2A:AA:D3:1F:26:70:9B:94:49:14:CF:72:9A:9C:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/4ad5abf6-6e01-3b5c-86a8-77c4b389fc78.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     46489
IP address blocks:        23.160.0.0/24 maxlen: 24
                          99.181.64.0/18 maxlen: 24
                          192.16.64.0/21 maxlen: 24
                          192.108.239.0/24 maxlen: 24
                          199.9.248.0/21 maxlen: 24
                          2620:f8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/2627756a-b322-49e6-941e-ed30e9ab9eae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/2627756a-b322-49e6-941e-ed30e9ab9eae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:c4:a4:59:d9:a8:66:16:78:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2627756a-b322-49e6-941e-ed30e9ab9eae
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=7c859b5b-7f93-435c-8e9e-d3a35cd0b63a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4f:06:c0:26:b6:ce:7f:a3:9c:ea:3b:7a:da:
                    a7:61:59:2d:ab:88:e8:ab:f7:94:50:6f:1d:77:31:
                    04:05:3f:0f:40:75:6e:81:23:ed:7a:ed:cb:fa:f4:
                    e8:3d:77:1e:fe:bb:d0:c6:df:37:09:2c:e4:3a:b9:
                    52:9f:46:e0:da:d0:4f:45:b0:23:5a:1b:6c:c7:c9:
                    02:6c:36:3e:30:d9:1e:a9:5e:72:8b:f3:8b:aa:94:
                    6f:f8:64:d1:b8:27:37:e1:32:b1:cd:99:8c:f7:9d:
                    a0:51:ba:bb:a8:d5:88:e5:0a:fc:cc:e7:b6:ca:3e:
                    e7:65:98:57:cb:cc:a3:ad:8b:7d:40:5f:0d:b1:58:
                    c7:37:12:fd:cc:8c:0c:bd:97:c1:25:75:e4:91:92:
                    aa:67:04:59:f3:ed:b0:a3:af:e4:fa:03:39:3e:12:
                    4a:d0:12:6c:e6:78:01:be:35:7f:aa:2a:dd:f7:7e:
                    6d:a7:77:1c:95:0f:13:00:c1:77:53:d5:79:9e:c8:
                    34:00:d3:56:6b:32:3b:aa:eb:40:34:56:1e:46:73:
                    02:a5:ff:b6:5e:e1:af:51:6d:90:d8:33:6f:b3:74:
                    20:9e:03:b4:92:95:ce:67:9b:19:c4:17:c0:06:f2:
                    85:c2:78:f5:d7:6a:f1:ac:93:13:97:c6:1f:1d:f9:
                    ad:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:C4:22:A2:C9:C3:C4:98:2C:28:DE:50:EC:BA:9B:EB:9D:5D:26:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/4ad5abf6-6e01-3b5c-86a8-77c4b389fc78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/2627756a-b322-49e6-941e-ed30e9ab9eae.crl

            X509v3 Authority Key Identifier:
                keyid:84:40:C9:06:5E:2A:AA:D3:1F:26:70:9B:94:49:14:CF:72:9A:9C:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.160.0.0/24
                  99.181.64.0/18
                  192.16.64.0/21
                  192.108.239.0/24
                  199.9.248.0/21
                IPv6:
                  2620:f8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:04:84:bc:8d:02:42:90:90:35:59:a9:48:e3:70:2e:51:86:
         17:b5:30:ea:56:12:34:aa:5d:2d:fb:70:2d:a0:11:43:c8:7c:
         47:72:54:ef:c3:04:c7:55:12:c4:4e:4d:8c:1f:b2:c0:56:8e:
         77:f8:a5:52:08:a1:77:9d:25:6a:dc:e8:70:9b:48:40:c9:3b:
         a0:e0:4a:f5:65:1e:de:25:1a:ef:e4:cb:89:18:ea:79:71:9f:
         84:eb:94:a4:14:31:8e:65:1b:60:69:7e:10:8c:6c:3e:65:6e:
         48:a6:8e:cd:2c:0b:2a:33:a1:44:89:39:b7:4b:36:3b:6f:93:
         1a:13:5f:a1:81:73:0f:a6:5b:b0:39:7a:22:ea:d8:3b:b1:d3:
         47:60:bd:0a:85:02:e4:4f:72:ba:78:a4:fc:1e:3a:04:a6:4f:
         91:94:56:da:25:6b:16:4a:0e:a2:30:1b:0e:64:16:d3:90:49:
         fd:b2:07:59:48:02:41:23:cd:d0:bd:95:71:59:31:88:c4:d4:
         2d:33:f8:ae:14:a3:d6:14:60:e7:bd:f8:c3:55:b1:ae:c4:25:
         68:92:20:f9:de:41:a3:b5:d0:57:0d:c8:75:f5:7c:93:d3:5d:
         14:0f:71:d5:b3:c8:ab:2d:8d:4f:41:13:e6:38:15:68:2b:a1:
         4a:19:e1:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:54:33 2025 by rpki-client